A company wants an automated process to continuously scan its Amazon EC2 instances for software vulnerabilities.
Which AWS service will meet these requirements?
Amazon GuardDuty
Amazon Inspector
Amazon Detective
Amazon Cognito
Explanations:
Amazon GuardDuty is primarily used for threat detection and monitoring for malicious activities, not vulnerability scanning.
Amazon Inspector is designed to automatically assess EC2 instances for vulnerabilities and unintended network exposure, making it suitable for continuous vulnerability scanning.
Amazon Detective helps analyze, investigate, and identify root causes of potential security issues but does not perform vulnerability scanning.
Amazon Cognito provides authentication and authorization for applications, not vulnerability management or scanning.
If memory serves me right, the answer is:
Amazon Inspector
I would say the answer is:
Amazon Inspector